Bump the github-actions group with 4 updates #289

	on:
	pull_request:
	branches:
	- "*"
	workflow_dispatch: {}

	name: "Pull Request"

	permissions:
	contents: read

	jobs:
	test:
	name: "Test"

	permissions:
	contents: read
	security-events: write

	uses: ./.github/workflows/part_test.yml

	build:
	name: "Build"

	permissions:
	id-token: write
	contents: read
	attestations: write

	uses: ./.github/workflows/part_build.yml
	with:
	attest: false

	docs:
	name: "Docs"

	permissions:
	id-token: write
	contents: read
	attestations: write

	uses: ./.github/workflows/part_docs.yml
	with:
	attest: false

	report_deps:
	name: "Report Dependencies"

	# PRs from external forks do not have access to the Submission API
	if: ${{ github.event.pull_request.head.repo.full_name == github.repository }}

	needs: ['build']

	permissions:
	contents: write

	uses: ./.github/workflows/part_report_deps.yml

	dependency-review:
	name: "Dependency Review"

	# PRs from external forks do not have access to the Submission API
	if: ${{ github.event.pull_request.head.repo.full_name == github.repository }}

	needs: ['report_deps']

	runs-on: ubuntu-latest

	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3
	with:
	egress-policy: audit

	- name: 'Checkout Repository'
	uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
	- name: 'Dependency Review'
	uses: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2

Provide feedback